Multi-cloud bi-directional storage replication system and techniques

ABSTRACT

Disclosed are systems, apparatuses and techniques for replicating data between different cloud computing platforms. Examples include storage replicator components operable in different cloud computing platforms. The first storage replicator component may identify the second cloud computing platform as a location to copy a data file in response to an event related to the data file stored in a first cloud computing platform. The first storage replicator component may request a copy of the data file via an application programming interface of the first cloud computing platform. The attributes of the copy of the data file which involve modification to conform to data management conventions of the second cloud computing platform may be determined and modified to comply with conventions of the second cloud computing platform. The modified copy of the data file may be forwarded to the second cloud computing platform for storage.

TECHNICAL FIELD

Embodiments herein generally relate to cloud computing platforms orplatforms, and more specifically, to replicating data between cloudcomputing platforms or platforms.

BACKGROUND

The use of cloud computing platforms has rapidly increased in the pastseveral years. The cloud computing platforms, such as Amazon AWS, IBMCloud, Google Cloud Platform, Microsoft Azure and the like, provide anumber of services that allows companies to minimize initial informationtechnology infrastructure expenses and also enable companies to adjustresources to meet unpredictable demand fluctuations.

An enterprise user may utilize more than one cloud computing platform tomitigate the remote chance that a particular cloud computing platformmay suffer a failure or an even a catastrophic failure, and all of theenterprises data and or services may be lost. Also, depending upon thegeographic locations of a cloud computing platforms, the enterprise mayuse multiple different cloud computing platform providers to allow forexpansion of service when one geographic region experiences greater andperhaps unanticipated usage as compared to a cloud computing platformlocated thousands of miles away.

Experience with the cloud computing platforms offered by differentproviders shows that data may easily be input into a respective cloudcomputing platform; however, extracting the data and storing it intoanother provider's cloud computing platform may be challenging.Challenges particularly arise when a user wishes to copy less than allof the data stored on a data storage disk in one could computingplatform and transfer the copied data to another provider's cloudcomputing platform.

Present cloud computing platforms commonly store data in files orrecords on a data storage disk maintained by the cloud computingprovider. In an e-commerce example, the data stored in a respective filemay be product data, vendor data, customer data, enterprise data or thelike. The data files or records, which may number into thehundreds-of-thousands or millions of files, may consume several datastorage disks on multiple different servers. When an enterprise userdesires to copy data from the data storage disks in the cloud computingplatform, the enterprise user must often use copy an entire data storagedisk that contains the data that the enterprise user is interested incopying. Even if the enterprise user desires to only copy a small numberof data files, the enterprise user is typically required to copy theentire data storage disk, using a “block copy.” As a result, the timerequired to make the data transfer increases as well as might the costas resources are used for longer periods of time, more data istransferred and exposed to potential loss, and more data storage spacein the new cloud computing platform that is receiving the copied datamust be used.

The data replication services existing on most cloud computing platformscommonly utilize the less secure internet small computer systemsinterface (iSCSI), a standard for internet protocol-based storagenetworking standard for linking data storage facilities.

Moreover, often times it is not as easy to simply copy data from onecloud computing platform and simply store the copied data to the newcloud computing platform because the new cloud computing platform mayhave different data conventions and formatting than the previous cloudcomputing platform from which the data is being copied. So not only doesan excessive amount of data have to be transferred but the data that isnot of interest typically must also be converted for storage in the newcloud computing platform.

Therefore, improvements that overcome the above inefficiencies of thepresent cloud computing platforms would be beneficial and advantageousto a number of cloud computing platform customers and/or users.

SUMMARY

Examples disclosed herein provide systems, methods, andcomputer-readable media for replicating data between cloud computingplatforms or platforms.

An example of a method is disclosed. The method includes steps ofidentifying, by a first storage replicator component operable in thefirst cloud computing platform, a second cloud computing platform inresponse to an event related to a data file stored in a first cloudcomputing platform. The event may indicate a change to an attribute ofthe data file. A copy of the data file may be requested by the firststorage replicator component via an application programming interface ofthe first cloud computing platform. The attributes of the copy of thedata file which involve modification to conform to data managementconventions of the second cloud computing platform may be determined.While copying the data file, the determined attributes of the copy ofthe data file may be modified to comply with the conventions of thesecond cloud computing platform. The modified copy of the data file maybe encrypted. The encrypted, modified copy of the data file may beforwarded to the second cloud computing platform for storage.

Also disclosed is a system including a customer network platform and anumber of cloud computing platforms. The customer network platform maycomprise a processor and a memory and may be communicatively coupled tothe data network and operable to perform a number of functions for acustomer entity. The number of cloud computing platforms may be coupledto the customer network platform and each cloud computing platformcomprising a cloud computing data storage. Each respective cloudcomputing platform of the plurality of cloud computing platforms may beoperable to perform functions via one or more respective applicationprogramming interfaces of each respective cloud computing platform. Eachrespective cloud computing platform may include a respective storagereplicator component within the respective cloud computing platformoperating as a serverless function operable to provide data replicationservices and may have a same customer and each respective storagereplicator component is associated with the customer. A first storagereplicator component in a first respective cloud computing platform ofthe plurality of cloud computing platforms may be operable to performfunctions. The functions may include accessing a file copy applicationprogramming interface provided by the first respective cloud computingplatform in response to an event related to a data file which is one ofa plurality of data files stored in a data storage of the firstrespective cloud computing platform. The first storage replicatorcomponent may determine that the data file is to be replicated to asecond respective cloud computing platform. A rules engine may beutilized to determine which attributes of the data file requiremodification to comply with data conventions of the second respectivecloud computing platform. Based on an output of the rules engine, thedata file may be modified to conform with the data conventions of thesecond respective cloud computing platform. The modified data file maybe forwarded from the first respective cloud computing platform to thesecond respective cloud computing platform.

An example of a computer readable medium is also provided. Thenon-transitory computer readable medium embodying programming code thatwhen executed by at least one processor causes the at least oneprocessor to perform functions. The functions include detecting, by afirst storage replicator component, an event related to a data filestored on a first cloud computing platform. Based on the detected event,a second cloud computing platform may be identified from a number ofother cloud computing platforms. The at least one processor may request,via a file copy application programming interface of the first cloudcomputing platform, a copy of the data file stored on the first cloudcomputing platform is generated through an application programinginterface related to a copy of the data file function. The at least oneprocessor may obtain the requested copy of the data file. A copycontainer executing in the first cloud computing platform may determinewhich attributes of the requested copy of the data file requiremodification to conform to data management conventions of the secondcloud computing platform. The determined attributes of the copy of thedata file may be modified to comply with the conventions of the secondcloud computing platform and generate a modified copy of the data file.The modified copy of the data file may be encrypted. The encrypted,modified requested copy of the data file may be forwarded in atransmission to the second cloud computing platform.

BRIEF DESCRIPTION OF THE DRAWINGS

FIG. 1 illustrates an example of an implementation of a system fortransferring data, including copied data, between multiple cloudcomputing platforms.

FIG. 2 illustrates an example of an apparatus operable to provide datareplication functions within a cloud computing platform.

FIG. 3 shows a flow chart of an example of a process for copying dataand transferring the copied data to other cloud computing platforms.

FIG. 4 shows a flow chart of an example of a process for copying dataand transferring the copied data to other cloud computing platforms.

FIG. 5 illustrates an example of a computing architecture suitable forimplementing the examples illustrated in FIGS. 1-4.

DETAILED DESCRIPTION

Examples disclosed herein provide a system, an apparatus and techniquesfor replicating data between cloud computing platforms or platforms.

The following examples illustrate improvements to the cloud computingplatforms with respect to replicating data that overcome the abovedescribed problems with prior cloud computing platforms. In particular,the described examples provide a system, an apparatus and techniquesthat enable a cloud computing customer to replicate data, such asspecific data within a data storage disk and not the entirety of data onthe storage disk, between cloud computing platforms or platforms, and toalso convert the data, if necessary, according to the conventions andformatting requirements of the target cloud computing platform (i.e.,the cloud computing platform where the copied data will be stored).

Advantageously, the disclosed examples provide an improved capabilityfor a cloud computing platform that reduces the amount of datatransferred (or exposed to interception or loss), the time and cloudcomputing resources required to transfer the data, convert the data, andfinally store the data in the new data storage of the new couldcomputing platform. Additional advantages, such as the capability tocopy data between public and private cloud computing providers thatleverages existing application programming interface (API) capabilitiesbut also adds missing capabilities through custom functionality tohandle differences between cloud computing providers, and by addingreversible data copy capabilities that are not available from all cloudcomputing providers. For example, the described examples includetechniques to compress and encrypt data, split the data to be copiedinto manageable chunks of data, and enables the data to be copied inparallel.

In addition, the improvements enable folder and file irregularities tobe corrected using, for example, a rules engine or similar approach.Examples disclose techniques and apparatuses operable to convert datafrom varying formats and convert to a generic file format for copyingand attaining high levels of throughput using highly parallel threadsand treating all data objects as offsite copies and not real-timecopies. The utilization of offsite copies allows copying of parts of thefile in an order that is more efficient, as opposed to real-time copyingwhich is less efficient because it requires data to be transferred in apredetermined order, regardless of transport efficiency.

With general reference to notations and nomenclature used herein, one ormore portions of the detailed description which follows may be presentedin terms of program processes executed on a computer or network ofcomputers. A process is here, and generally, conceived to be aself-consistent sequence of operations leading to a desired result.These operations are those requiring physical manipulations of physicalquantities. Usually, though not necessarily, these quantities take theform of electrical, magnetic, or optical signals capable of beingstored, transferred, combined, compared, and otherwise manipulated. Itproves convenient at times, principally for reasons of common usage, torefer to these signals as bits, values, elements, symbols, characters,terms, numbers, or the like. It should be noted, however, that all ofthese and similar terms are to be associated with the appropriatephysical quantities and are merely convenient labels applied to thosequantities.

Further, these manipulations are often referred to in terms, such asadding or comparing, which may be associated with mental operationsperformed by a human operator. However, no such capability of a humanoperator is necessary, or desirable in most cases, in any of theoperations described herein that form part of one or more embodiments.Rather, these operations are machine operations. Useful machines forperforming operations of various embodiments include digital computersas selectively activated or configured by a computer program storedwithin that is written in accordance with the teachings herein, and/orinclude apparatus specially constructed for the required purpose or adigital computer. Various embodiments also relate to apparatus orsystems for performing these operations. These apparatuses may bespecially constructed for the required purpose. The required structurefor a variety of these machines will be apparent from the descriptiongiven.

Reference is now made to the drawings, wherein like reference numeralsare used to refer to like elements throughout. In the followingdescription, for purpose of explanation, numerous specific details areset forth in order to provide a thorough understanding thereof. It maybe evident, however, that the novel examples can be practiced withoutthese specific details. In other instances, well-known structures anddevices are shown in block diagram form to facilitate a descriptionthereof. The intention is to cover all modification, equivalents, andalternatives within the scope of the claims.

FIG. 1 is an example of an implementation of a system for monitoringdata quality. An enterprise may be a commercial, governmental, oranother type of entity that interacts with and provides services tousers (i.e. clients or customers). The enterprise may be a customer to anumber of cloud computing platforms, both private and public, that theenterprise uses to maintain data and provide services

The system 100 may include a data network 110, a customer networkplatform 160 and a number of cloud computing platforms 123, 125, and127. The data network 110 may be operable to facilitate the exchange ofdata between the respective cloud computing platforms 123, 125 and 127.For example, the customer network platform 160 may be communicativelycoupled to the data network 110 and operable to perform a number offunctions, such as providing services, processing data and the like, fora customer entity, such as an enterprise. The customer network platform160 may include a storage replicator component 162, a customer datastorage 164, and a customer network processor 165. The replicatorcomponent 162 may respond to commands from the customer networkprocessor 165 to provide data requests to a respective storagereplicator component, such as 133, 135 or 137 operating in a respectivecloud computing platform 123, 125 or 127.

The number of cloud computing platforms 123, 125 and 127 may also becommunicatively coupled to the customer network platform via the datanetwork 110. The cloud computing platforms 123, 125 and 127 may be anyone of the public computing platforms, such as Amazon AWS, Google cloudplatform (GPC), IBM cloud, Microsoft Azure or the like. Alternatively,the cloud computing platforms 123, 125 and 127 may be private cloudcomputing platforms. A private cloud computing platform may providesimilar functions as a public cloud computing platform, but only for useby a limited number of customers. For example, an enterprise may wish tohave all of its information technology infrastructure hosted in a cloudcomputing platform, such as 123, 125 or 127 to reduce costs, more easilymanage hardware assets, and provide consistent capabilities and servicesacross the enterprise. In addition, the enterprise may wish to eitherdistribute or duplicate its information technology infrastructure acrossthe multiple cloud computing platforms 123, 125 or 127 for purposes ofload distribution, redundancy, failure mitigation or the like.

Each respective cloud computing platform 123, 125 or 127 may be operableto perform event monitoring and data replication functions via one ormore respective application programming interfaces within a cloudprovider application programming interface (API) library present in eachrespective cloud computing platform. Events monitored by the cloudcomputing platforms 123, 125 or 127 may include one or more of: when adata file is created, a data file is updated, a data file is modified, adata file is sent to an addressed storage location for storage, anindication of a need to back up a data file from the first respectivecloud computing platform and the second respective cloud computingplatform, or an indication of a need to load balance between the firstrespective cloud computing platform and the second respective cloudcomputing platform. The event may be related to a respective cloudcomputing platform of a number of cloud computing platforms, including afirst respective cloud computing platform and a second respective cloudcomputing platform.

Each respective cloud computing platform 123, 125 and 127 may include arespective storage replicator component such as 133, 135 and 137,respectively, a cloud provider application programming interface (API)library 143, 145 and 147, respectively, and a cloud provider datastorage 153, 155 and 157, respectively. Each cloud provider API library143, 145 and 147 may respectively include at least a file copy API 163,165 and 167.

Each respective storage replicator component 133, 135 and 137 mayoperate as a serverless function within the respective cloud computingplatform 123, 125 and 127 operable to provide data replication services.Each cloud computing platform 123, 125 and 127 may all provide servicesto the same customer (i.e., customer network platform 160) and eachrespective storage replicator component is associated with the customerand may receive instructions via a customer network platform, such as160 in FIG. 1.

A first storage replicator component, such as 133, 135 or 137, may be aserverless function that is uploaded to the respective cloud computingplatform 123, 125 or 127 for use by the customer network platform 160.For example, the storage replicator component 135 may be operable toperform functions, such as accessing a file copy application programminginterface (API) 165 provided, via the cloud provider API library 145 bythe respective cloud computing platform 125 in response to an eventrelated to a data file stored in the cloud provider data storage 155.Storage replicator components 133 and 137 may be operable to performsimilar functions as storage replicator component 135.

In an example, upon accessing the file copy application programminginterface, such as 163, 165 or 167 from a respective cloud provider APIlibrary 143, 145 or 147, a first respective storage replicatorcomponent, such as 135, may be further operable to obtain authenticationcredentials of the customer associated with the customer networkplatform 160 and authenticate the customer based on the obtainedauthentication credentials. Authentication is discussed in more detailwith reference to FIG. 2.

It may be helpful to provide a more specific discussion of a storagereplicator component and the data replication functions that may beperformed by the elements within system 100.

FIG. 2 illustrates an example of storage replication components 230 and240 operable to provide data replication functions. Each of the storagereplicator components 230 and 240 is associated with a customer and isuploaded to the respective cloud computing platform for execution by thecustomer and provides services for the customer. Each storagereplication component 230 and 240 are located at different cloudcomputing platforms from one another, or alternatively, one of thestorage replication components 230 or 240 may be at a customer networkplatform while the other is a cloud computing platform. When located ina cloud computing platform, the respective storage replicator components230 and 240 may be operable to execute as a serverless functionsoperable to provide data replication services on a respective cloudcomputing platform. For example, storage replicator component 230 may belocated in a first computing platform, such as 123, while storagereplicator component 240 may be located in a second cloud computingplatform, such as 125. The data replication services may include copyingthe data requested to be copied at a first cloud computing platform(such as 123) or receiving data that has been copied from thefirst-cloud computing platform (such as 123) and uploading the copieddata to a second (or another) cloud computing platform (such as 125), orboth.

The storage replication components 230 and 240 may, respectively,include elements such as a file copy application 233, 243, a copycontainer 235, 245, and an encryption component 237, 247 that togetherenable replicating data obtained on one cloud computing platform andtransferring the copied data to other cloud computing platforms.

The respective file copy applications 233, 243 in respective storagereplicator components 230, 243 may be computer programs that execute asa serverless function operable to perform a number of functions in theirrespective cloud computing platform. For example, the file copyapplication 233 may monitor for events related to the customer's datafiles stored in a particular cloud provider's data storage, such ascloud provider data storage 157 of cloud computing platform 127, and inresponse to the detection or determination of an occurrence of an event,may initiate a data replication response to the occurrence of an event.The file copy application 233, 243 may also include a rules engine 298,279, respectively, that is operable to evaluate attributes of the datafile to be copied to determine whether the data file attributes must bemodified according to conventions for the cloud computing platform towhich the data file is to be replicated. The rules engine 298 or 279 maybe computer code that is operable to identify modifications that need tobe made to a data file stored in one cloud computing platform to besaved in another cloud computing platform. For example, file nameformats or the like may be different between two cloud computingplatforms.

In addition to the rules engine 298, the file copy application 233 mayaccess other computer programs for services or to perform functions,such as the copy container 235 and authentication component 239 thatincludes authentication credentials 299. The file copy application 233may, for example, initiate a copy container 235, which is a computerprogram operable to copy any data files identified as being related tothe occurrence of the event. In an example, the data files to be copiedmay be treated as offsite copies which allows copying of parts of thefile in an order that is more efficient. This is in contrast toreal-time copying which requires data to be transferred in apredetermined order, regardless of transport efficiency.

Depending upon the size of the identified data file or files, multipleinstances of the copy container 235 may be instantiated by the storagereplicator component 230 to operate in parallel to copy the identifieddata file or data files. For example, the first respective storagereplicator component 230 is further operable to determine a size of thedata file. In response to the determined size of the data file exceedinga predetermined size threshold (such as 250 gigabytes, 1 terabyte or thelike), the first respective storage replicator component 230 mayinstantiate a number of different containers of programming code.

Moreover, the storage replicator component 230 via the copy container235 may be able to instantiate other containers 295, such as a dividingcontainer, that is operable to efficiently divide the data file to becopied amongst the number of copy containers instantiated to copy thedata file in parallel. For example, an instantiated dividing container295 may divide the data file to be copied into chunks of data, and arespective copy container that may be assigned to a respective chunk ofthe chunks of data. Each respective copy container may be operable toreplicate an assigned respective chunk of data. Each respective copycontainer may modify is assigned respective chunk of data. The modifiedrespective chunk of data may be provided to the first respective storagereplicator component to be forwarded to the second respective cloudcomputing platform. The first respective storage replicator component230 may either queue the chunk of modified data until the complete datafile to be copied has been copied and modified or may send each modifiedchunk to the second respective cloud computing platform where the chunksof modified data may be put back together for decryption and storage inthe second cloud computing platform.

The file copy application 233 may, for example, be operable to initiatecontact, via a connection within the cloud computing platform in whichthe storage replicator component resides, with a cloud provider libraryof APIs, such as 270. The cloud provider library of APIs 270 may containa file copy API 278 that enables the storage replicator component 230 tocopy specified data files within the cloud provider data storage.However, use of some APIs, such as the file copy API 278, within thecloud provider library of APIs 270 may require authentication of thecomputer program, such as the storage replicator component 230 or filecopy application 233, requesting use of the APIs in the library of APIs270. In such cases, the storage replicator component 230 may utilize theauthentication component 239 to perform the authentication function. Forexample, the authentication component 239 may have one or moreauthentication credentials associated with the customer. Upon successfulauthentication, the authentication component 239 may report thesuccessful authentication to the file copy application 233. In responseto the successful authentication, the file copy application 233 mayinstantiate the copy container 235 to copy the data files related to thetriggering event.

As the copy container 235 or containers complete the copying of the datafile, the copied data file may be encrypted by the encryption component237. In some circumstances, even if the data file is encrypted prior tobeing copied, the copied data file containing previously-encrypted datais further encrypted by encryption component 237. The encryption appliedby encryption component 237 may be according to an encryption algorithmfrom the SHA-2 family of cryptographic hash function. The encrypted copyof the data file may be forwarded to another cloud computing platformfor storage or processing. The encrypted copy of the data file may bereceived by another storage replicator component 240 executing on theother cloud computing platform.

The storage replicator component 240 may be an example of a storagereplicator component that executes in a second (or another) cloudcomputing platform. As shown, the storage replicator component 240 mayreceive encrypted replicated data from another cloud provider via a datanetwork, such as data network 110 of FIG. 1. The storage replicatorcomponent 240 may include components similar to those in storagereplicator component 230. For example, storage replicator component 240may include a file copy application, a copy container 245, anauthentication component 249 that includes authentication (Auth.)credentials 259, and an encryption component 247. The authenticationcomponent 249 may provide the authentication credentials 259 to APIs,such as a file copy API 288 in the cloud provider library of APIs 280.The encryption component 247 may also be operable to not only encryptdata but also decrypt an encrypted copy of the data file received fromanother storage replicator component, such as 230. More detailedoperational examples of the storage replication components 230 and 240are explained below with reference to FIG. 3.

FIG. 3 illustrates an example of a process that utilizes a storagereplicator component executing in a first cloud computing platform and asecond storage replicator component executing in a second cloudcomputing platform.

In an example prior to the start of process 300, each storage replicatorcomponent, such as 230 and 240 may monitor customer data files in therespective cloud data storage of the cloud computing platform in whichthe respective storage replicator component is installed. For example, afirst storage replicator component in a first cloud computing platformmay monitor a customer's data files for an occurrence of an event, suchas those mentioned above, that triggers the replication of theparticular data files affected by the event. The first storagereplicator component may act upon determining or detecting an eventrelated to a customer's data file. The event may, for example, indicatea change to an attribute of the data file. Examples of events include atleast one of when a data file is created, a data file is updated, a datafile is modified, a data file is sent to a bucket for storage, anindication of a need to load balance between the first cloud computingplatform and the second cloud computing platform, or the like. Forexample, based on the event, the first storage replicator component maydetermine that the data file is to be replicated to a second respectivecloud computing platform.

Continuing with the example in FIG. 3, the first storage replicatorcomponent may identify a second cloud computing platform to receivereplicated data in response to the event related to the data file storedin the first cloud computing platform (310). More specifically, thesecond cloud computing platform may be identified and selected from thenumber of cloud computing platforms based on the event being of aparticular event type. An event type may be, for example, a change tothe data within the data file, a modification to the permissions toaccess or edit the data file, a change in the metadata, or the like.Alternatively, or in addition, the second cloud computing platform maybe identified selected from the number of cloud computing platform basedon a status of the data file related to the event. For example, a datafile status may be critical (e.g., related to operations of the customernetwork platform or the like), sensitive (e.g., related to customer'sclients or users) and regulatory-related (e.g., the data relates togovernmental regulations and statutes, such as Security ExchangeCommission, Federal Communications Commission or the like).

At 320, the first storage replicator component, via an API of the firstcloud computing platform (e.g., file copy API 278 in FIG. 2) request acopy of the data file due to the determined or detected event. Therequest for a copy of the data file may be a call by the copy fileapplication for a file copy API, such as 233 and 278 in FIG. 2, in thecloud provider library of APIs, such as 270 of FIG. 2 of the first cloudcomputing platform.

In addition, as part of step 320, the APIs in the cloud provider APIlibrary typically require authentication credentials before the APIpermits its use by an application. Therefore, for example, the file copyapplication 233 within the first storage replicator component 230 ofFIG. 2 may call or access the authentication component 239 to obtain oneor more authentication (Auth.) credentials 299 of the customerassociated with the first storage replicator component 230. Using theone or more authentication credentials 299, the storage replicatorcomponent 230 may authenticate the customer as being permitted to copythe data file in the first cloud computing platform based on theauthentication credentials 299. Upon successful authentication, the filecopy application 233 may continue processing the request to copy thedata file.

Each data file may include at least one attribute, such as content ofthe data file, a filename of the data file, a data file metadata format,a size of the data file or the like. The attributes of the copy of thedata file which involve modification to conform to data managementconventions or the other formatting requirements of the second cloudcomputing platform may be determined (330). The determination of whichattributes of the copy of the data file involve modification, at 330,may be performed, for example, by a rules engine, such as rules engine298 or 299 of FIG. 2. An attribute may involve modification if theattribute does not conform to the data management conventions or otherformatting requirements of the cloud computing platform to which thedata file is being replicated (i.e., copied).

In an example, the rules engine 298 of the storage replicator component230 may be provided with an identifier of the second cloud computingplatform (e.g., 125 of FIG. 1 or the cloud computing platform in whichstorage replicator component 240 is located). In response to providingthe identifier of the second cloud computing platform, the rules enginemay retrieve attribute rules related to the second cloud computingplatform. For example, the attribute rules for a number of differentcloud computing platforms, such as 123, 125 and 127 of FIG. 1, may bestored in a data storage within a respective cloud computing platformthat is accessible to a respective storage replicator component. Theattribute rules may be processed to determine which attributes of thecopy of the data file involve modification to conform to the attributerules related to the second cloud computing platform. For example, whenthe processing of the attribute rules is completed, the attributes ofthe copy of the data file determined to involve modification are output.

As the data file is being copied, the determined attributes of the copyof the data file output from the rules engine may be modified by thestorage replicator component, such as 230, or components thereof, suchas copy container 235 to comply with the conventions of the second cloudcomputing platform (340). For example, the data in the data file may becopied and any attributes related to the data file, such as metadata,data format, file name conventions or the like, may be modified as thedata file is being copied.

The modified copy of the data file may be encrypted (350) prior to beingforwarded to the second cloud computing platform for storage. Asmentioned above, the encryption may be performed according to any knownencryption algorithms. At 360, the encrypted, modified copy of the datafile may be forwarded in a transmission to the second cloud computingplatform for storage. In addition, the transmission to the second cloudcomputing platform may include in addition to the encrypted, modifiedcopy of the data file, a request for an application programminginterface of the second cloud computing platform that is compatible withthe file copy application programming interface in the first cloudcomputing platform.

The second cloud computing platform may, for example, include a secondstorage replicator component, such as 240 of FIG. 2, that executes inthe second cloud computing platform. An example of a process performedby the second cloud computing platform in response to receiving theencrypted, modified copy of the data file is illustrated in FIG. 4. Inthe example process 400, the second storage replicator component mayperform functions such as receiving the encrypted modified data fileforwarded from the first cloud computing platform (410) via a datanetwork, such as data network 110 of FIG. 1. In response to receivingthe modified data file, the second respective storage replicatorcomponent may authenticate the first storage replicator component of thefirst cloud computing environment via an application programminginterface of the second cloud computing platform as an application,component or entity that is authorized to copy data to second cloudcomputing platform (420). The authentication may be performed, forexample, by a second file copy application using authenticationcredentials accessible by an authentication component or the like. Uponsuccessful authentication, the encrypted modified copy of the data fileforwarded from the first cloud computing platform may be decrypted(430). After the encrypted modified copy of the data file is decrypted,the modified data file may be stored in a data storage of the secondrespective cloud computing platform (440). The file copy application mayforward a message to the customer network platform indicating themodified data file was successfully stored in the second cloud computingplatform (450). The forwarded message may include data relevant to themodified data file, such as modified file name, modified metadata, otherinformation or data related to the modifications made to data fileattributes due to the data storage conventions, a location within thedata storage of the second cloud computing device or the like.

FIG. 5 illustrates an example of an exemplary computing architecture 500suitable for implementing various examples as previously described. Inone example, the computing architecture 500 may include elements of orbe implemented as part of system 100 of FIG. 1.

As used in this application, the terms “system” and “component” areintended to refer to a computer-related entity, either hardware, acombination of hardware and software, software, or software inexecution, examples of which are provided by the exemplary computingarchitecture 500. For example, a component can be, but is not limited tobeing, a process running on a processor, a processor, a hard disk drive,multiple storage drives (of optical and/or magnetic storage medium), anobject, an executable, a thread of execution, a program, and/or acomputer. By way of illustration, both an application running on aserver and the server can be a component. One or more components canreside within a process and/or thread of execution, and a component canbe localized on one computer and/or distributed between two or morecomputers. Further, components may be communicatively coupled to eachother by various types of communications media to coordinate operations.The coordination may involve the uni-directional or bi-directionalexchange of information. For instance, the components may communicateinformation in the form of signals communicated over the communicationsmedia. The information can be implemented as signals allocated tovarious signal lines. In such allocations, each message is a signal.Further examples, however, may alternatively employ data messages. Suchdata messages may be sent across various connections. Exemplaryconnections include parallel interfaces, serial interfaces, and businterfaces.

The computing architecture 500 includes various common computingelements, such as one or more processors, multi-core processors,co-processors, memory units, chipsets, controllers, peripherals,interfaces, oscillators, timing devices, video cards, audio cards,multimedia input/output (I/O) components, power supplies, and so forth.The examples, however, are not limited to implementation by thecomputing architecture 500.

As shown in FIG. 5, the computing architecture 500 includes a processingunit 504, a system memory 506 and a system bus 508. The processing unit504 can be any of various commercially available processors.

The system bus 508 provides an interface for system componentsincluding, but not limited to, the system memory 506 to the processingunit 504. The system bus 508 can be any of several types of busstructure that may further interconnect to a memory bus (with or withouta memory controller), a peripheral bus, and a local bus using any of avariety of commercially available bus architectures. Interface adaptersmay connect to the system bus 508 via slot architecture. Example slotarchitectures may include without limitation Accelerated Graphics Port(AGP), Card Bus, (Extended) Industry Standard Architecture ((E)ISA),Micro Channel Architecture (MCA), NuBus, Peripheral ComponentInterconnect (Extended) (PCI(X)), PCI Express, Personal Computer MemoryCard International Association (PCMCIA), and the like.

The computing architecture 500 may include or implement various articlesof manufacture. An article of manufacture may include acomputer-readable storage medium to store logic. Examples of acomputer-readable storage medium may include any tangible media capableof storing electronic data, including volatile memory or non-volatilememory, removable or non-removable memory, erasable or non-erasablememory, writeable or re-writeable memory, and so forth. Examples oflogic may include executable computer program instructions implementedusing any suitable type of code, such as source code, compiled code,interpreted code, executable code, static code, dynamic code,object-oriented code, visual code, and the like. Examples may also be atleast partly implemented as instructions contained in or on anon-transitory computer-readable medium, which may be read and executedby one or more processors to enable performance of the operationsdescribed herein.

The system memory 506 may include various types of computer-readablestorage media in the form of one or more higher speed memory units, suchas read-only memory (ROM), random-access memory (RAM), dynamic RAM(DRAM), Double-Data-Rate DRAM (DDRAM), synchronous DRAM (SDRAM), staticRAM (SRAM), programmable ROM (PROM), erasable programmable ROM (EPROM),electrically erasable programmable ROM (EEPROM), flash memory, polymermemory such as ferroelectric polymer memory, ovonic memory, phase changeor ferroelectric memory, silicon-oxide-nitride-oxide-silicon (SONOS)memory, magnetic or optical cards, an array of devices such as RedundantArray of Independent Disks (RAID) drives, solid state memory devices(e.g., USB memory, solid state drives (SSD) and any other type ofstorage media suitable for storing information. In the illustratedexample shown in FIG. 5, the system memory 506 can include non-volatilememory 510 and/or volatile memory 512. A basic input/output system(BIOS) can be stored in the non-volatile memory 510.

The computer 502 may include various types of computer-readable storagemedia in the form of one or more lower speed memory units, including aninternal hard disk drive (HDD) 514 (or external hard disk drive (HDD)513), a magnetic floppy disk drive (FDD) 516 to read from or write to aremovable magnetic disk 518, and an optical disk drive 520 to read fromor write to a removable optical disk 522 (e.g., a CD-ROM or DVD). Theinternal HDD 514 or external HDD 513, FDD 516 and optical disk drive 520can be connected to the system bus 508 by an HDD interface 524, an FDDinterface 526 and an optical drive interface 528, respectively. The HDDinterface 524 for external drive implementations can include at leastone or both of Universal Serial Bus (USB) and IEEE 1394 interfacetechnologies.

The drives and associated computer-readable media provide volatileand/or nonvolatile storage of data, data structures, computer-executableinstructions, and so forth. For example, a number of computer programmodules can be stored in the drives and memory 510, 512, including anoperating system 530, one or more application programs 532, otherprogram modules 534, and program data 536. In one example, the one ormore application programs 532, other program modules 534, and programdata 536 can include, for example, the various applications and/orcomponents of the computing architecture 500.

A user can enter commands and information into the computer 502 throughone or more wire/wireless input devices, for example, a keyboard 538 anda pointing device, such as a mouse 550. Other input devices may includemicrophones, infra-red (IR) remote controls, radio-frequency (RF) remotecontrols, game pads, stylus pens, card readers, dongles, finger printreaders, gloves, graphics tablets, joysticks, keyboards, retina readers,touch screens (e.g., capacitive, resistive, etc.), trackballs, trackpads, sensors, styluses, and the like. These and other input devices areoften connected to the processing unit 504 through communicationinterface 556 that is coupled to the system bus 508 but can be connectedby other interfaces such as a parallel port, IEEE 1394 serial port, agame port, a USB port, an IR interface, and so forth.

A monitor 544 or other type of display device is also connected to thesystem bus 508 via an interface, such as a video adaptor 546. Themonitor 544 may be internal or external to the computer 502. In additionto the monitor 544, a computer typically includes other peripheraloutput devices, such as speakers, printers, and so forth.

The computer 502 may operate in a networked platform using logicalconnections via wire and/or wireless communications to one or moreremote computers, such as a remote computer 548. The remote computer 548can be a workstation, a server computer, a router, a personal computer,portable computer, microprocessor-based entertainment appliance, a peerdevice or other common network node, and typically includes many or allthe elements described relative to the computer 502, although, forpurposes of brevity, only a memory/storage device 559 is illustrated.The logical connections depicted include wire/wireless connectivity to alocal area network (LAN) 552 and/or larger networks, for example, a widearea network (WAN) 554. Such LAN and WAN networking platforms arecommonplace in offices and companies, and facilitate enterprise-widecomputer networks, such as intranets, all of which may connect to aglobal communications network, for example, the Internet.

When used in a LAN networking platform, the computer 502 is connected tothe LAN 552 through a wire and/or wireless communication interface 556.The communication interface 556 can facilitate wire and/or wirelesscommunications to the LAN 552, which may also include a wireless accesspoint disposed thereon for communicating with the wireless functionalityof the communication interface 556.

When used in a WAN networking platform, the computer 502 can include amodem 558, or is connected to a communications server on the WAN 554 orhas other means for establishing communications over the WAN 554, suchas by way of the Internet. The modem 558, which can be internal orexternal and a wire and/or wireless device, connects to the system bus508 via the input device interface 542. In a networked platform, programmodules depicted relative to the computer 502, or portions thereof, canbe stored in the memory/storage device 559. It will be appreciated thatthe network connections shown are exemplary and other means ofestablishing a communications link between the computers can be used.

The computer 502 is operable to communicate with wire and wirelessdevices or entities using the IEEE 802 family of standards, such aswireless devices operatively disposed in wireless communication (e.g.,IEEE 802.11 over-the-air modulation techniques). This includes at leastWi-Fi (or Wireless Fidelity), WiMax, and Bluetooth™ wirelesstechnologies, among others. Thus, the communication can be a predefinedstructure as with a conventional network or simply an ad hoccommunication between at least two devices. Wi-Fi networks use radiotechnologies called IEEE 802.11x (a, b, g, n, etc.) to provide secure,reliable, fast wireless connectivity. A Wi-Fi network can be used toconnect computers to each other, to the Internet, and to wire networks(which use IEEE 802.3-related media and functions).

The various elements of the devices as previously described withreference to FIGS. 1-4 may include various hardware elements, softwareelements, or a combination of both. Examples of hardware elements mayinclude devices, logic devices, components, processors, microprocessors,circuits, processors, circuit elements (e.g., transistors, resistors,capacitors, inductors, and so forth), integrated circuits, applicationspecific integrated circuits (ASIC), programmable logic devices (PLD),digital signal processors (DSP), field programmable gate array (FPGA),memory units, logic gates, registers, semiconductor device, chips,microchips, chip sets, and so forth. Examples of software elements mayinclude software components, programs, applications, computer programs,application programs, system programs, software development programs,machine programs, operating system software, middleware, firmware,software modules, routines, subroutines, functions, methods, procedures,software interfaces, application program interfaces (API), instructionsets, computing code, computer code, code segments, computer codesegments, words, values, symbols, or any combination thereof. However,determining whether an example is implemented using hardware elementsand/or software elements may vary in accordance with any number offactors, such as desired computational rate, power levels, heattolerances, processing cycle budget, input data rates, output datarates, memory resources, data bus speeds and other design or performanceconstraints, as desired for a given implementation.

It will be appreciated that the exemplary devices shown in the blockdiagrams described above may represent one functionally descriptiveexample of many potential implementations. Accordingly, division,omission or inclusion of block functions depicted in the accompanyingfigures does not infer that the hardware components, circuits, softwareand/or elements for implementing these functions would be necessarily bedivided, omitted, or included in examples.

At least one computer-readable storage medium may include instructionsthat, when executed, cause a system to perform any of thecomputer-implemented methods described herein.

Some examples may be described using the expression “one example” or “anexample” along with their derivatives. These terms mean that aparticular feature, structure, or characteristic described in connectionwith the example is included in at least one example. The appearances ofthe phrase “in one example” in various places in the specification arenot necessarily all referring to the same example. Moreover, unlessotherwise noted the features described above are recognized to be usabletogether in any combination. Thus, any features discussed separately maybe employed in combination with each other unless it is noted that thefeatures are incompatible with each other.

With general reference to notations and nomenclature used herein, thedetailed descriptions herein may be presented in terms of programprocedures executed on a computer or network of computers. Theseprocedural descriptions and representations are used by those skilled inthe art to most effectively convey the substance of their work to othersskilled in the art.

A process is here, and generally, conceived to be a self-consistentsequence of operations leading to a desired result. These operations arethose requiring physical manipulations of physical quantities. Usually,though not necessarily, these quantities take the form of electrical,magnetic or optical signals capable of being stored, transferred,combined, compared, and otherwise manipulated. It proves convenient attimes, principally for reasons of common usage, to refer to thesesignals as bits, values, elements, symbols, characters, terms, numbers,or the like. It should be noted, however, that all of these and similarterms are to be associated with the appropriate physical quantities andare merely convenient labels applied to those quantities.

Further, the manipulations performed are often referred to in terms,such as adding or comparing, which are commonly associated with mentaloperations performed by a human operator. No such capability of a humanoperator is necessary, or desirable in most cases, in any of theoperations described herein, which form part of one or more examples.Rather, the operations are machine operations.

Some examples may be described using the expression “coupled” and“connected” along with their derivatives. These terms are notnecessarily intended as synonyms for each other. For example, someexamples may be described using the terms “connected” and/or “coupled”to indicate that two or more elements are in direct physical orelectrical contact with each other. The term “coupled,” however, mayalso mean that two or more elements are not in direct contact with eachother, but yet still co-operate or interact with each other.

As used in this application, the terms “system” and “component” areintended to refer to a computer-related entity, either hardware, acombination of hardware and software, software, or software inexecution, examples of which are provided by the examples in FIGS. 1-5.For example, a component can be, but is not limited to being, a processrunning on a processor, a processor, a hard disk drive, multiple storagedrives (of optical and/or magnetic storage medium), an object, anexecutable, a thread of execution, a computer program, and/or acomputer. By way of illustration, both an application running on aserver or processor and the server or processor can be a component. Oneor more components can reside within a process and/or thread ofexecution, and a component can be localized on one computer and/ordistributed between two or more computers. Further, components may becommunicatively coupled to each other by various types of communicationsmedia to coordinate operations. The coordination may involve theuni-directional or bi-directional exchange of information. For instance,the components may communicate information in the form of signalscommunicated over the communications media. The information can beimplemented as signals allocated to various signal lines. In suchallocations, each message is a signal. Further embodiments, however, mayalternatively employ data messages. Such data messages may be sentacross various connections. Exemplary connections include parallelinterfaces, serial interfaces, and bus interfaces.

Various examples also relate to apparatus or systems for performingthese operations. This apparatus may be specially constructed for therequired purpose and may be selectively activated or reconfigured by acomputer program stored in the computer. The procedures presented hereinare not inherently related to a particular computer or other apparatus.The required structure for a variety of these machines will appear fromthe description given.

It is emphasized that the Abstract of the Disclosure is provided toallow a reader to quickly ascertain the nature of the technicaldisclosure. It is submitted with the understanding that it will not beused to interpret or limit the scope or meaning of the claims. Inaddition, in the foregoing Detailed Description, various features aregrouped together in a single example for streamlining the disclosure.This method of disclosure is not to be interpreted as reflecting anintention that the claimed examples require more features than areexpressly recited in each claim. Rather, as the following claimsreflect, inventive subject matter lies in less than all features of asingle disclosed example. Thus, the following claims are herebyincorporated into the Detailed Description, with each claim standing onits own as a separate example. In the appended claims, the terms“including” and “in which” are used as the plain-English equivalents ofthe respective terms “comprising” and “wherein,” respectively. Moreover,the terms “first,” “second,” “third,” and so forth, are used merely aslabels and are not intended to impose numerical requirements on theirobjects.

The foregoing description of example embodiments has been presented forthe purposes of illustration and description. It is not intended to beexhaustive or to limit the present disclosure to the precise formsdisclosed. Many modifications and variations are possible in light ofthis disclosure. It is intended that the scope of the present disclosurebe limited not by this detailed description, but rather by the claimsappended hereto. Future filed applications claiming priority to thisapplication may claim the disclosed subject matter in a different mannerand may generally include any set of one or more limitations asvariously disclosed or otherwise demonstrated herein.

What is claimed is:
 1. A method, comprising: in response to an eventrelated to a data file that is one of a plurality of data files storedin a cloud computing data storage of a first cloud computing platform,identifying, by a first storage replicator component in the first cloudcomputing platform, a second cloud computing platform to receivereplicated data, wherein the event indicates a change to an attribute ofthe data file; requesting, by the first storage replicator component viaan application programming interface of the first cloud computingplatform, a copy of the data file; determining which attributes of thecopy of the data file involve modification to conform to data managementconventions of the second cloud computing platform by: accessing a rulesengine; providing an identifier of the second cloud computing platformto the rules engine; in response to providing the identifier of thesecond cloud computing platform, retrieving attribute rules related tothe second cloud computing platform; and determining which attributes ofcopy of the data file involve modification to conform to the attributerules related to the second cloud computing platform; while copying thedata file, modifying the determined attributes of the copy of the datafile to comply with the conventions of the second cloud computingplatform; encrypting the modified copy of the data file; and forwardingthe encrypted, modified copy of the data file to the second cloudcomputing platform for storage.
 2. The method of claim 1, whereinattributes of the copy of the data file include at least one of contentof the data file, a filename of the data file, data file metadata formator a size of the data file.
 3. The method of claim 1, wherein an eventis one of when a file is created, a file is updated, a file is modified,a file is sent to a bucket for storage, an indication of a need to loadbalance between the first cloud computing platform and the second cloudcomputing platform.
 4. The method of claim 1, further comprising:obtain, by the first storage replicator component, authenticationcredentials of a customer associated with a customer network platform;and authenticate the customer as being permitted to copy the data filein the first cloud computing platform based on the obtainedauthentication credentials.
 5. The method of claim 1, furthercomprising: in response to the event being of a particular event type,selecting the second cloud computing platform from a plurality of cloudcomputing platforms coupled to a customer network platform.
 6. Themethod of claim 1, further comprising: in response to a status of thedata file related to the event, selecting the second cloud computingplatform from a plurality of cloud computing platforms coupled to acustomer network platform.
 7. The method of claim 1, further comprising:detecting the event related to the data file.
 8. The method of claim 1,further comprising: receiving, by a second storage replicator componentexecuting in the second cloud computing platform, the encrypted modifieddata file forwarded from the first cloud computing platform;authenticating the second storage replicator component via anapplication programming interface of the second cloud computingplatform; decrypting the encrypted modified copy of the data fileforwarded from the first cloud computing platform; and storing themodified data file in data storage of the second cloud computingplatform.
 9. A system, comprising: a customer network platformcomprising a processor and a memory, wherein the customer networkplatform is operable to perform a number of functions for a customerentity; and a plurality of cloud computing platforms coupled to thecustomer network platform and each cloud computing platform comprising acloud computing data storage, wherein: each respective cloud computingplatform of the plurality of cloud computing platforms is operable toperform functions via one or more respective application programminginterfaces of each respective cloud computing platform, each respectivecloud computing platform includes a respective storage replicatorcomponent within the respective cloud computing platform operating as aserverless function operable to provide data replication services, eachrespective cloud computing platform has a same customer and eachrespective storage replicator component is associated with the customer,and wherein a first respective storage replicator component in a firstrespective cloud computing platform of the plurality of cloud computingplatforms is operable to perform functions, including functions to: inresponse to an event related to a data file which is one of a pluralityof data files stored in a data storage of the first respective cloudcomputing platform, access a file copy application programming interfaceprovided by the first respective cloud computing platform; determinethat the data file is to be replicated to a second respective cloudcomputing platform; utilize a rules engine to determine which attributesof the data file require modification to comply with data conventions ofthe second respective cloud computing platform; based on an output ofthe rules engine, modify the data file to conform with the dataconventions of the second respective cloud computing platform; andforward the modified data file from the first respective cloud computingplatform to the second respective cloud computing platform.
 10. Thesystem of claim 9, wherein upon accessing the file copy applicationprogramming interface, the first respective storage replicator componentis further operable to perform functions, including functions to: obtainauthentication credentials of the customer associated with the customernetwork platform; and authenticate the customer based on the obtainedauthentication credentials.
 11. The system of claim 9, wherein the firstrespective storage replicator component is further operable to performfunctions, including functions to: determine a size of the data file; inresponse to the determined size of the data file exceeding apredetermined size threshold, instantiating a dividing containeroperable to divide the data file into chunks of data; instantiating arespective copy container is assigned a respective chunk of the chunksof data, wherein each respective copy container is operable to replicatean assigned respective chunk of data; modify, by each respective copycontainer, the respective chunk of data assigned to the respective copycontainer; and provide the modified respective chunk of data to thefirst respective storage replicator component to be forwarded to thesecond respective cloud computing platform.
 12. The system of claim 9,wherein a second respective storage replicator component in the secondrespective cloud computing platform of the plurality of cloud computingplatform is operable to perform functions, including functions to:receive the modified data file forwarded from the first respective cloudcomputing platform; authenticate the first storage replicator componentvia an application programming interface of the second respective cloudcomputing platform; and store the modified data file in data storage ofthe second respective cloud computing platform.
 13. The system of claim9, wherein attributes of the data file include at least one of contentof the data file, a filename of the data file, data file metadata formator a size of the data file.
 14. The system of claim 9, wherein an eventrelated to a respective cloud computing platform of the plurality ofcloud computing platforms, including the first respective cloudcomputing platform and the second respective cloud computing platform,is: one of when a file is created, a file is updated, a file ismodified, a file is sent to a bucket for storage, an indication of aneed to back up a file from the first respective cloud computingplatform and the second respective cloud computing platform, or anindication of a need to load balance between the first respective cloudcomputing platform and the second respective cloud computing platform.15. A non-transitory computer readable medium embodying programming codethat when executed by at least one processor causes the at least oneprocessor to perform functions, including functions to: detect, fromwithin a first cloud computing platform, an event related to a data filewhich is one of a plurality of data files stored in the first cloudcomputing platform; based on the detected event, identify a second cloudcomputing platform from a plurality of other cloud computing platforms;request, via a file copy application programming interface provided bythe first cloud computing platform, a copy of the data file stored onthe first cloud computing platform, wherein the copy of the data file isgenerated through the file copy application programing interface relatedto a copy file application; obtain the requested copy of the data file;determine, via a copy container executing in the first cloud computingplatform, which attributes of the requested copy of the data filerequire modification to conform to data management conventions of thesecond cloud computing platform, by performing functions to: access arules engine; provide an identifier of the second cloud computingplatform to the rules engine; in response to providing the identifier ofthe second cloud computing platform, retrieve attribute rules related tothe second cloud computing platform; and determine which attributes ofcopy of the data file involve modification to conform to the attributerules related to the second cloud computing platform; modify thedetermined attributes of the copy of the data file to comply with theconventions of the second cloud computing platform and generate amodified copy of the data file; encrypt the modified copy of the datafile; and forward the encrypted, modified requested copy of the datafile in a transmission to the second cloud computing platform.
 16. Thenon-transitory computer readable medium of claim 15, further comprisingprogramming code that when executed by the processor causes theprocessor to perform functions, including functions to: including withthe encrypted, modified requested copy of the data file forwarded to thesecond cloud computing platform, a request for an applicationprogramming interface of the second cloud computing platform that iscompatible with the file copy application programming interface in thefirst cloud computing platform.
 17. The non-transitory computer readablemedium of claim 15, further comprising programming code that whenexecuted by the processor causes the processor to perform functions,including functions to: upon detecting the event related to the datafile, obtain authentication credentials stored in an authentication keystorage within the first cloud computing platform; and provide theauthentication credentials to the file copy application programminginterface of the first cloud computing platform.
 18. The non-transitorycomputer readable medium of claim 15, further comprising programmingcode that when executed by the processor causes the processor to performfunctions, including functions to: determine that a size of therequested copy of the data file is greater than a predetermined sizethreshold; in response to the determination that the data file isgreater than a predetermined size threshold, instantiate another copycontainer via the file copy application programming interface; andprovide a portion of the data contained in the data file to the othercopy container to be copied.
 19. The non-transitory computer readablemedium of claim 15, further comprising programming code that whenexecuted by the processor causes the processor to perform functions,including functions to: prior to forwarding the encrypted modified,requested copy of the data file to the second cloud computing platform,further encrypting the transmission forwarding the encrypted modified,requested copy of the data file to the second cloud computing platform.